Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
File:                     TzvVbotU5tonu-ZiLaxny_Aqgeo.mft (raw, json)
Hash identifier:          NyuzKI6iPa0Wpawpuj9W/yOloXMm7/oE0Eu5ml81HAo=
Subject key identifier:   54:21:69:DA:F0:82:6F:1F:8C:AA:92:CB:B0:18:91:81:A7:97:8A:91
Authority key identifier: 4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
Certificate issuer:       /CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Certificate serial:       019FAB63081528DF2779226A9DD6141905E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
Manifest number:          19D6
Signing time:             Wed 29 Jul 2026 01:00:21 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:21 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:21 +0000
Files and hashes:         1: 6h3DLRd0aoO08FWkuvK-DIL1TAI.roa (hash: QbNhinBRvnYOWmudxD6YkQ5YvTv3wj3nF5VH2568D0c=)
                          2: TzvVbotU5tonu-ZiLaxny_Aqgeo.crl (hash: l5jW/eaBLx0IK1CctTe6l0aQJJBezDsiaBRLe/Cjgn4=)
                          3: kzYQmwQKzbuQvS3iB2mDUlnw91Y.roa (hash: bz4ecHp+kkkRf1WW8soaqZgJTcHf8FiOXW+H4gSzf48=)
                          4: lv8af-jyuveaHC9x_OKdx2NgSxI.roa (hash: qC6P7LJylLpMoNR/tNemeZF9+aw6XACba3yU1fASXaI=)
                          5: wMLINqfRL31emUgeWzPrQ7en_WU.roa (hash: 28WktakjRSH95PtqAXbEMoIgPvxQiYsWki+RGQe70G0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:08:15:28:df:27:79:22:6a:9d:d6:14:19:05:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
        Validity
            Not Before: Jul 29 01:00:21 2026 GMT
            Not After : Jul 30 01:00:21 2026 GMT
        Subject: CN=542169daf0826f1f8caa92cbb0189181a7978a91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3f:52:27:7c:15:c5:df:4c:6a:9a:5e:79:0b:
                    30:fb:e7:af:4d:c6:c2:b1:ff:37:6e:18:d3:b0:cb:
                    4b:f9:e0:31:e6:a0:a1:fc:ec:7c:06:37:31:ee:b1:
                    8f:61:2e:49:66:b5:04:f0:d5:c8:57:b9:aa:a2:cd:
                    66:ea:4b:76:e7:82:24:7b:0d:40:44:40:59:39:f8:
                    1b:f3:17:ac:5f:32:5d:e5:af:9e:e7:bc:15:de:32:
                    08:80:2b:09:2f:9e:09:66:51:b7:29:ef:1c:55:ba:
                    e6:c1:0c:6e:fa:6e:a2:83:87:53:51:68:63:e3:ab:
                    c7:14:81:45:14:f9:ac:43:22:99:86:61:5b:4e:3c:
                    db:15:3b:21:6f:bb:7c:d7:e1:70:0f:ea:f2:18:83:
                    20:1c:90:26:60:b0:09:e6:58:be:10:08:ea:63:27:
                    60:0f:4c:bc:c5:0b:69:6c:ed:9d:1e:98:5e:8a:ec:
                    60:af:d7:f6:63:99:0f:0e:27:6e:a9:64:23:de:bb:
                    f8:ca:e7:f3:07:d0:77:28:c2:58:ee:82:59:40:30:
                    99:cd:13:3c:bb:8d:0c:04:6b:63:25:9c:f7:e8:51:
                    1c:65:b0:3e:1b:04:a6:79:47:ea:8d:93:6d:80:d5:
                    6e:56:7f:15:8c:85:92:95:b3:b9:9c:ec:3f:0d:94:
                    1f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:21:69:DA:F0:82:6F:1F:8C:AA:92:CB:B0:18:91:81:A7:97:8A:91
            X509v3 Authority Key Identifier:
                keyid:4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:8a:bc:29:ad:e4:46:97:7d:c6:e8:ef:59:8f:de:2d:8a:d7:
         a8:71:fb:b2:9d:fc:b1:50:91:9d:b8:0f:e6:b9:91:3c:8c:de:
         2a:ac:ab:21:04:34:90:13:e7:a7:74:87:9c:bf:34:be:ff:f6:
         2e:d2:a4:e1:fb:0c:77:1d:ba:b5:27:fc:9a:19:4d:1e:a4:21:
         af:ad:0b:c2:42:2f:c5:00:db:41:cf:65:cc:b7:a5:40:64:7c:
         dc:40:75:2a:9b:e7:64:0a:8d:19:69:e3:2e:ed:83:0f:79:74:
         4e:67:da:f3:cc:c6:e7:d2:e6:db:76:95:30:69:c6:5e:8b:23:
         a4:ee:b3:6c:b4:a8:c5:54:84:2a:ce:08:56:6a:52:3c:82:84:
         b0:7c:f5:d4:0c:dc:9d:9a:16:a1:9d:56:4f:20:0c:60:ee:52:
         fd:5a:e8:c8:d4:6e:70:08:dd:48:89:00:a7:52:ac:4a:72:96:
         7a:de:ea:d7:32:9b:06:45:22:6f:ea:05:08:90:bf:39:be:e9:
         db:74:e6:2a:48:bd:07:8e:dc:7e:97:75:4d:65:ac:de:06:79:
         75:d7:70:da:76:23:eb:3a:ac:88:30:5e:60:a3:3b:a7:51:89:
         df:63:ef:48:0f:13:4b:53:95:21:43:41:61:21:aa:2e:86:f6:
         0d:77:27:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:50:08 2026 by rpki-client